| Previous | Next |
| STATUS_PCP_KEY_USAGE_POLICY_NOT_SUPPORTED | STATUS_PCP_SOFT_KEY_ERROR |
STATUS_PCP_KEY_USAGE_POLICY_INVALID
The key-usage policy does not satisfy PCP validation rules
STATUS_PCP_KEY_USAGE_POLICY_INVALID means that PCP rejected the requested policy itself. Unlike the "not supported" result, this code points to an invalid combination, encoding, value, or relationship in the policy presented for this key and provider context.
This should be debugged as structured configuration data. A policy copied from a different key class, TPM version, or application may have the right intention but still be invalid for the current object.
What to check
- Capture the policy fields before serialization and the provider/key properties against which they are validated.
- Verify the key algorithm, usage role, parent and PCR/authorization assumptions before changing any one field.
- Keep invalid-policy diagnostics separate from authentication failures; changing credentials does not repair malformed policy data.
References
- Microsoft: PCP and TPM error codes
- Microsoft: CNG Key Storage Providers
- Trusted Computing Group: TPM 2.0 Library Specification
Looking for a different code? Search another status or error code.